Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update Jackson to 2.13.3 #5076

Merged
merged 4 commits into from
Jun 12, 2022
Merged

Update Jackson to 2.13.3 #5076

merged 4 commits into from
Jun 12, 2022

Conversation

senivam
Copy link
Contributor

@senivam senivam commented Jun 7, 2022

Signed-off-by: Maxim Nesen maxim.nesen@oracle.com

@senivam
Update Jackson to 2.13.3
b4227a2 
Signed-off-by: Maxim Nesen <maxim.nesen@oracle.com>
@senivam senivam self-assigned this Jun 7, 2022
@senivam senivam linked an issue Jun 7, 2022 that may be closed by this pull request
Update Jackson to 2.13.3 #5067
Closed
@senivam
Copy link
Contributor Author

senivam commented Jun 7, 2022 •
edited
Loading

CQs:

  • 24131 - com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
  • 24132 - com.fasterxml.jackson.jaxrs:jackson-jaxrs-base
  • 24134 - com.fasterxml.jackson.core:jackson-core
  • 24135 - com.fasterxml.jackson.core:jackson-annotations
  • 24136 - com.fasterxml.jackson.core:jackson-databind
  • 24137 - com.fasterxml.jackson.module:jackson-module-jaxb-annotations
  • 24138 - com.fasterxml.jackson.datatype:jackson-datatype-jdk8
  • 24139 - com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider

created

@jansupol
Copy link
Contributor

jansupol commented Jun 8, 2022

I think that we need CQs for

  • com.fasterxml.jackson.core:jackson-core
  • com.fasterxml.jackson.jaxrs:jackson-jaxrs-base
  • com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
  • com.fasterxml.jackson.module:jackson-module-jaxb-annotations
  • com.fasterxml.jackson.core:jackson-databind
  • com.fasterxml.jackson.core:jackson-annotations
  • com.fasterxml.jackson.datatype:jackson-datatype-jdk8
  • com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider

Especially the jackson-databind module because it is where the CVE is.

@senivam
Copy link
Contributor Author

senivam commented Jun 9, 2022

I think that we need CQs for

  • com.fasterxml.jackson.core:jackson-core
  • com.fasterxml.jackson.jaxrs:jackson-jaxrs-base
  • com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
  • com.fasterxml.jackson.module:jackson-module-jaxb-annotations
  • com.fasterxml.jackson.core:jackson-databind
  • com.fasterxml.jackson.core:jackson-annotations
  • com.fasterxml.jackson.datatype:jackson-datatype-jdk8
  • com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider

Especially the jackson-databind module because it is where the CVE is.

A full list of CQs is listed in my message above.

@jansupol
Copy link
Contributor

jansupol commented Jun 9, 2022 •
edited
Loading

Please update notice file in the jackson module, too.

@senivam
Notice file update for repackaged modules
90d12c5 
Signed-off-by: Maxim Nesen <maxim.nesen@oracle.com>
@jansupol jansupol added this to the 2.36 milestone Jun 9, 2022
@senivam
servlet-2.5-reload test disabled due to some issue (to be fixed after…
26c780a 
… 2.36)

Signed-off-by: Maxim Nesen <maxim.nesen@oracle.com>
@senivam
CP year
1bc56c7 
Signed-off-by: Maxim Nesen <maxim.nesen@oracle.com>
@senivam senivam merged commit f20d45d into eclipse-ee4j:master Jun 12, 2022
@senivam senivam deleted the jacksonUpdate branch June 12, 2022 06:47
This was referenced Jun 14, 2022
Merged
Merged
Closed
Merged
Merged
Closed
Merged
Merged
Merged
Merged
Merged
Merged
Merged
@renovate renovate bot mentioned this pull request Dec 22, 2022
Closed
1 task
This was referenced Jan 6, 2023
Merged
Closed
This was referenced Feb 11, 2023
Merged
Closed
@renovate renovate bot mentioned this pull request Mar 23, 2023
Closed
1 task
@mend-for-github-com mend-for-github-com bot mentioned this pull request Mar 26, 2023
Open
This was referenced May 11, 2023
Open
Open
This was referenced Jun 1, 2023
Merged
Closed
This was referenced Jun 4, 2023
Merged
Closed
This was referenced Jun 15, 2023
Merged
Merged
This was referenced Jun 26, 2023
Closed
Open
This was referenced Jul 6, 2023
Open
Open
This was referenced Aug 28, 2023
Merged
Merged
This was referenced Nov 30, 2023
Closed
Closed
Open
@mend-for-github-com mend-for-github-com bot mentioned this pull request Jan 11, 2024
Open
@renovate renovate bot mentioned this pull request Mar 1, 2024
Merged
1 task
@mend-for-github-com mend-for-github-com bot mentioned this pull request Mar 24, 2024
Open
1 task
This was referenced Apr 13, 2024
Merged
Open
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jbescos jbescos jbescos approved these changes

@jansupol jansupol jansupol approved these changes

Assignees

@senivam senivam

Labels
CQ required
Projects
None yet
Milestone
2.36
Development

Successfully merging this pull request may close these issues.

Update Jackson to 2.13.3
3 participants
@senivam @jansupol @jbescos